Multiple integer overflows in the allocator in the TextXtra.x32 module in Adobe Shockwave Player before 11.5.8.612 allow remote attackers to cause a denial of service (heap memory corruption) or execute arbitrary code via a crafted (1) element count or (2) element size value in a file.

The remote Mac OS X host contains a version of Adobe Shockwave Player that is 11.5.7.609 or earlier. It is, therefore, affected by multiple vulnerabilities :

  - Multiple memory corruption issues exist that allow     arbitrary code execution. (CVE-2010-2863,     CVE-2010-2864, CVE-2010-2866, CVE-2010-2869,     CVE-2010-2870, CVE-2010-2871, CVE-2010-2872,     CVE-2010-2873, CVE-2010-2873, CVE-2010-2874,     CVE-2010-2875, CVE-2010-2876, CVE-2010-2877,     CVE-2010-2878, CVE-2010-2880, CVE-2010-2881,     CVE-2010-2882)

  - A pointer offset vulnerability exists that allows code     execution. (CVE-2010-2867)

  - Multiple unspecified denial of service issues exist.
    (CVE-2010-2865, CVE-2010-2868)

  - An integer overflow vulnerability exists that allows     to code execution. (CVE-2010-2879)

The remote Windows host contains a version of Adobe's Shockwave Player that is earlier than 11.5.8.612.  Such versions are potentially affected by the following issues :

  - Multiple memory corruption issues exist that could lead     to arbitrary code execution. (CVE-2010-2863,     CVE-2010-2864, CVE-2010-2866, CVE-2010-2869,     CVE-2010-2870, CVE-2010-2871, CVE-2010-2872,     CVE-2010-2873, CVE-2010-2873, CVE-2010-2874,     CVE-2010-2875, CVE-2010-2876, CVE-2010-2877,     CVE-2010-2878, CVE-2010-2880, CVE-2010-2881,     CVE-2010-2882)

  - A pointer offset vulnerability exists that could lead to     code execution. (CVE-2010-2867)

  - Multiple unspecified denial of service issues exist.     (CVE-2010-2865, CVE-2010-2868)

  - An integer overflow vulnerability exists that could lead     to lead to code execution. (CVE-2010-2879)

ID	Name	Product	Family	Severity
80173	Adobe Shockwave Player <= 11.5.7.609 (APSB10-20) (Mac OS X)	Nessus	MacOS X Local Security Checks	critical
48436	Shockwave Player < 11.5.8.612	Nessus	Windows	high

Detections

Analytics

CVE-2010-2879

critical

Tenable Plugins

critical

high